PRIVACY POLICY

© 2024-2025 Danielle WIlliams for PRISM OS. All Rights Reserved.

Last Updated: January 1, 2025

I. INTRODUCTION
The PRISM Operating System™ ("PRISM," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our assessment tools, resources, and related services.

II. INFORMATION WE COLLECT
A. Personal Information

• Name and contact information

• Professional information (title, organization)

• Assessment responses and results

• Account credentials

• Communication preferences

B. Usage Data

• Access times and patterns

• Device information

• IP address

• Browser type

• System performance data

​

III. COOKIE POLICY
A. Essential Cookies

• Required for system functionality

• Authentication and security

• User preferences

• Session management

B. Analytics Cookies

• Usage patterns

• System performance

• User experience optimization

• Aggregate statistics

C. Cookie Management

• Browser settings control

• Opt-out options

• Impact of disabling cookies

• Third-party cookie policies

​

IV. DATA USAGE
A. Primary Uses

• Delivering assessment results

• Maintaining your account

• Improving our services

• Research and development (anonymized)

• Customer support

B. Legal Bases for Processing

• Contract fulfillment

• Legitimate interests

• Consent

• Legal obligations

​

V. DATA PROTECTION
A. Security Measures

• Encryption in transit and at rest

• Access controls

• Regular security audits

• Incident response procedures

​

B. Data Retention

• Active account data: Duration of account plus 2 years

• Anonymized data: Indefinitely for research

• Backup retention: 7 years

• Account deletion options

​

VI. DATA PROCESSING AGREEMENT (GDPR Compliance)
A. Scope and Purpose

• Assessment delivery

• Professional development

• System improvement

• Research purposes

B. Data Controller Rights and Obligations

• Purpose limitation

• Data minimization

• Accuracy maintenance

• Storage limitation

C. Data Transfer Mechanisms

• EU-approved safeguards

• Standard contractual clauses

• Privacy Shield compliance

• Cross-border transfer protocols

D. Security Requirements

• Technical measures

• Organizational measures

• Staff training

• Access controls

E. Breach Notification

• 72-hour notification requirement

• Impact assessment

• Mitigation measures

• Documentation requirements

​

VII. DATA SHARING
A. Third-Party Service Providers

• Cloud hosting providers

• Analytics services

• Payment processors

• Support services

B. Legal Requirements

• Court orders

• Legal obligations

• Government requests

• Rights protection

​

VIII. USER RIGHTS
A. Access Rights

• View personal data

• Request corrections

• Data portability

• Account deletion

B. Control Options

• Communication preferences

• Cookie settings

• Marketing opt-outs

• Data processing limitations

IX. INTERNATIONAL USERS
A. Cross-Border Transfers

• Data protection standards

• Transfer mechanisms

• Regional compliance

• User consent requirements

​

X. CHILDREN'S PRIVACY

• No services for under 16

• Parental consent requirements

• Data deletion procedures

• Age verification measures

​

XI. CHANGES TO PRIVACY POLICY

• Notice of updates

• Communication methods

• Continuation of use

• Version history

​

XII. CONTACT INFORMATION
For privacy-related inquiries:

admin@theprismos.com
Responses within 48-72 hours.